Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b3b07b0c-a30d-4cac-9123-4d459839ea53/c3549815-27d5-353e-87f6-2ad7769f7dea.roa
File:                     c3549815-27d5-353e-87f6-2ad7769f7dea.roa (raw, json)
Hash identifier:          uvMow1fB/O+AVm0SCJxT7RIDmApaiD1NLVTn171RYIg=
Subject key identifier:   92:8C:D4:35:29:F0:B9:73:07:10:4B:ED:3F:CE:38:16:64:2C:CE:86
Certificate issuer:       /CN=b3b07b0c-a30d-4cac-9123-4d459839ea53
Certificate serial:       010D0C9F4328584F6292DD2AFD5A45D53AA534C0
Authority key identifier: 59:24:E7:34:C0:E9:1A:2B:B8:76:B7:09:36:1F:7C:7F:77:37:22:DF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b3b07b0c-a30d-4cac-9123-4d459839ea53.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b3b07b0c-a30d-4cac-9123-4d459839ea53/c3549815-27d5-353e-87f6-2ad7769f7dea.roa
Signing time:             Sun 04 Oct 2026 01:00:13 +0000
ROA not before:           Sun 04 Oct 2026 01:00:13 +0000
ROA not after:            Sat 02 Jan 2027 02:00:13 +0000
asID:                     16509
IP address blocks:        165.1.12.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b3b07b0c-a30d-4cac-9123-4d459839ea53/b3b07b0c-a30d-4cac-9123-4d459839ea53.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b3b07b0c-a30d-4cac-9123-4d459839ea53/b3b07b0c-a30d-4cac-9123-4d459839ea53.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b3b07b0c-a30d-4cac-9123-4d459839ea53.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 Oct 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:62:92:dd:2a:fd:5a:45:d5:3a:a5:34:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3b07b0c-a30d-4cac-9123-4d459839ea53
        Validity
            Not Before: Oct  4 01:00:13 2026 GMT
            Not After : Jan  2 02:00:13 2027 GMT
        Subject: CN=e120b901-4516-427f-ba9b-11363de5ff7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:e5:b7:35:86:de:60:5e:e3:df:a1:b6:33:e1:
                    ff:88:8a:cd:d3:75:fe:16:e6:a1:26:bd:14:2e:78:
                    c1:d6:54:e5:1c:38:4d:db:d7:9a:10:2b:29:b3:19:
                    22:c6:f8:4b:16:80:ff:1d:e6:c5:94:7f:64:2f:26:
                    2e:41:da:82:5c:19:56:ed:96:98:e9:54:73:81:27:
                    42:8d:f5:6c:04:fe:29:0f:3a:b1:8d:6b:26:4d:92:
                    f6:fd:f1:41:47:0b:02:f8:13:eb:40:25:a7:5c:52:
                    62:96:32:77:c3:8d:05:fd:de:27:67:73:4d:32:89:
                    7a:af:e0:46:97:69:d5:5c:ae:67:f5:e7:2e:b0:e5:
                    b7:8c:87:f5:82:38:5c:cd:77:8e:11:c5:bc:47:66:
                    06:08:ae:3d:71:81:60:be:f8:4d:b4:f7:71:32:ea:
                    23:71:f1:51:ee:ec:5f:0b:da:86:66:66:54:fd:98:
                    13:f3:2e:b4:a4:b4:91:84:73:c9:ab:a2:5c:10:d5:
                    77:39:0e:18:9f:f8:a3:77:84:bf:63:30:88:35:62:
                    d3:46:a7:23:e3:8b:b5:c8:52:63:3d:7e:9a:af:b5:
                    02:54:2b:62:87:9c:82:ae:61:ad:07:bd:8d:87:3c:
                    44:52:8e:76:23:77:e7:ae:e0:cf:e4:aa:92:8b:da:
                    8d:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:8C:D4:35:29:F0:B9:73:07:10:4B:ED:3F:CE:38:16:64:2C:CE:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b3b07b0c-a30d-4cac-9123-4d459839ea53/c3549815-27d5-353e-87f6-2ad7769f7dea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b3b07b0c-a30d-4cac-9123-4d459839ea53/b3b07b0c-a30d-4cac-9123-4d459839ea53.crl

            X509v3 Authority Key Identifier:
                keyid:59:24:E7:34:C0:E9:1A:2B:B8:76:B7:09:36:1F:7C:7F:77:37:22:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b3b07b0c-a30d-4cac-9123-4d459839ea53.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.1.12.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:77:df:ec:1b:42:e2:b7:6e:28:d0:b7:a4:6f:e1:ed:75:b8:
         d5:a3:23:aa:29:ec:84:7a:81:29:bb:6b:3d:49:1c:50:b2:74:
         3c:e9:f2:f5:1e:aa:f6:0e:c3:95:04:5e:a8:fc:90:c1:5b:ea:
         66:45:35:80:07:99:e1:c5:df:68:e5:bf:3a:91:69:a7:06:e6:
         4b:94:5c:ca:ac:ed:5c:46:b4:69:b7:55:57:9e:f8:b2:41:52:
         e7:1e:3e:26:e8:82:bc:ea:a2:c8:94:f4:9d:ea:54:6f:61:34:
         85:6d:c1:85:94:1a:25:ac:41:9e:ef:25:37:80:e8:d4:d7:68:
         09:a6:c4:98:28:87:bc:25:1c:ac:3a:cd:23:10:b0:a5:68:07:
         db:32:80:e8:11:55:d8:6a:cf:d9:58:d9:e8:6e:82:3b:8a:fb:
         4b:3f:af:e1:d3:fb:f8:42:57:1b:ec:d8:56:78:e0:de:07:a8:
         27:7e:3b:64:53:bf:6d:fd:a6:e0:5e:42:6b:2e:38:2c:54:ec:
         68:00:d2:b4:21:94:25:2b:b8:b8:c8:5b:fd:d7:49:b8:82:b3:
         ed:d7:2e:96:15:4d:5e:65:8f:d5:85:11:0c:a0:3c:d6:4b:67:
         5d:39:d3:4e:6a:ff:0e:a2:a4:eb:fb:ca:3e:7d:2f:ca:3e:c6:
         51:a9:70:fc
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9ikt0q/VpF1TqlNMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjNiMDdiMGMtYTMwZC00Y2FjLTkxMjMtNGQ0NTk4Mzll
YTUzMB4XDTI2MTAwNDAxMDAxM1oXDTI3MDEwMjAyMDAxM1owLzEtMCsGA1UEAxMk
ZTEyMGI5MDEtNDUxNi00MjdmLWJhOWItMTEzNjNkZTVmZjdlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArOW3NYbeYF7j36G2M+H/iIrN03X+FuahJr0U
LnjB1lTlHDhN29eaECspsxkixvhLFoD/HebFlH9kLyYuQdqCXBlW7ZaY6VRzgSdC
jfVsBP4pDzqxjWsmTZL2/fFBRwsC+BPrQCWnXFJiljJ3w40F/d4nZ3NNMol6r+BG
l2nVXK5n9ecusOW3jIf1gjhczXeOEcW8R2YGCK49cYFgvvhNtPdxMuojcfFR7uxf
C9qGZmZU/ZgT8y60pLSRhHPJq6JcENV3OQ4Yn/ijd4S/YzCINWLTRqcj44u1yFJj
PX6ar7UCVCtih5yCrmGtB72NhzxEUo52I3fnruDP5KqSi9qNJQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJKM1DUp8LlzBxBL7T/OOBZkLM6GMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iM2Iw
N2IwYy1hMzBkLTRjYWMtOTEyMy00ZDQ1OTgzOWVhNTMvYzM1NDk4MTUtMjdkNS0z
NTNlLTg3ZjYtMmFkNzc2OWY3ZGVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYjNiMDdiMGMtYTMwZC00Y2FjLTkx
MjMtNGQ0NTk4MzllYTUzL2IzYjA3YjBjLWEzMGQtNGNhYy05MTIzLTRkNDU5ODM5
ZWE1My5jcmwwHwYDVR0jBBgwFoAUWSTnNMDpGiu4drcJNh98f3c3It8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC9iM2IwN2IwYy1hMzBkLTRjYWMtOTEyMy00ZDQ1
OTgzOWVhNTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBpQEMMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAC933+wbQuK3bijQt6Rv4e11uNWjI6op7IR6gSm7az1JHFCydDzp8vUe
qvYOw5UEXqj8kMFb6mZFNYAHmeHF32jlvzqRaacG5kuUXMqs7VxGtGm3VVee+LJB
UucePibogrzqosiU9J3qVG9hNIVtwYWUGiWsQZ7vJTeA6NTXaAmmxJgoh7wlHKw6
zSMQsKVoB9sygOgRVdhqz9lY2ehugjuK+0s/r+HT+/hCVxvs2FZ44N4HqCd+O2RT
v239puBeQmsuOCxU7GgA0rQhlCUruLjIW/3XSbiCs+3XLpYVTV5lj9WFEQygPNZL
Z105005q/w6ipOv7yj59L8o+xlGpcPw=
-----END CERTIFICATE-----
Generated at Sat Oct 10 11:18:57 2026 by rpki-client